Keywords
Vulnerabilities, Security, Scanner, Score

Technologies
Regex, Go, GitHub

Modern software development operates at a speed that has become too much for traditional manual security audits. As teams push code multiple times daily, the risk of overlooking vulnerabilities in Pull Requests increases significantly. This project introduces an automated analysis tool designed to identify security flaws early in the development lifecycle. Built with a Go backend and a Vue.js frontend, the system scans source code for vulnerabilities categorized across a custom framework, ranging from deterministic patterns like SQL injection to complex heuristic-based risks.

The tool implements a scoring algorithm that turns technical findings into an intuitive A–F security grade. By assigning weighted penalties to vulnerabilities, the system provides developers with a clear understanding of their code’s overall health. To bridge the knowledge gap, the tool provides a hybrid remediation strategy: offering immediate fix recommendations while integrating future context-aware, AI-driven suggestions. By integrating security into the CI/CD pipeline, this project allows developers to catch and fix costly mistakes before they ever reach production.